Analysis

  • max time kernel
    2921680s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230831-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
  • submitted
    19-09-2023 15:52

General

  • Target

    4c52e6a16bf9df19fa77455a7c87eaba81fcd094d547004306122d83dda36bdd_JC.apk

  • Size

    3.5MB

  • MD5

    2bf79ecbf3a9cf2b7e8e4d99087a74a5

  • SHA1

    2456291fc376aad939c5673029440876fd59e45e

  • SHA256

    4c52e6a16bf9df19fa77455a7c87eaba81fcd094d547004306122d83dda36bdd

  • SHA512

    b3db8899ecc4a24e78dc37cb4e5d9fdafc209770cd60060c0eab781a15ed4bde4f535cba18860eb2015b03efab1320e52ad0986a53d412145cdb1ffd2c52423a

  • SSDEEP

    98304:lSPL6efffnRcj7jGPJqQdG8BMSqVauu3kKSz4hz7:lSjXcXgOVaj3tG4hz7

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4444
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4503

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      96214b3e4b7411ae5e8184cf298248ac

      SHA1

      817a8e932e20dde4aa10a07408ca4c0524afc346

      SHA256

      6996b4dd2e8d32e7bc32bc066e722a3c5a410a7de1e4d3c5d2004306bffcf985

      SHA512

      8ce094c1906d68d60122684cee4b3905fa1be8c214a1d19a1b26220e7199133a3d208f4bd39ac4a9cd9db8a8b07f3bab17fe6c2907e16243d8f577535aa44c1a

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      df860e6a15163e43babfeefabe37a263

      SHA1

      c1851eb41b8d3f051b7c65c9b1d00124dbef7343

      SHA256

      0720249136a9c993c791593cad459bfd8c872056c409777da7090d3e4702f6a0

      SHA512

      8c30ae2f29e743531a4fc6cbd49e8fe5498073076f9dd019f05bc2794f243d51482c04fff799c2ec86b2674159e2de0296ac8a264cca2e021d4e8d6785a08abf

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      231b5cac14a152c0020295f1232194e9

      SHA1

      e397709ecd50e1178125f1e2fa50c60cea60f69c

      SHA256

      af3826d82f909749273cda1e0bfbeddedb5c729d489b582c4c0ef894c1e54e28

      SHA512

      090a8c3dc195684c0f590f90e3b8b21a950ac9e2fca0743d451946e47604852f01e6aaf967f04c3c85066cd3d4da484a286f68b6747d9270e345e71d4a8676e0

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      4016d955c57068fd45f7caece5357c5c

      SHA1

      432b1337419226256f5217cc529aaef312338852

      SHA256

      0699cf59bfacc3ab9a9a04845b3aa9ac23c1c3bacebaa87b707d2c6334cc6ed8

      SHA512

      73f3a27dffed619cfec8220f29a78805262324c89d96e572c31607b623d07dc97622ff5fb8acbba4ae475e64e05edac81baa5bde94a54790063fbeaa372dca0f

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      de82e2c94d2718988804b035a46d17b1

      SHA1

      705f5ff19093ad209f2a666085d6ccaed3bf58a4

      SHA256

      29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39

      SHA512

      68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d9cf75fdd1c2292d986f6c3d5d60f2c8

      SHA1

      07ecb1d3a26d952ae5fecf54f36699ab498510b1

      SHA256

      2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

      SHA512

      442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      fc64705051aedb02372817477e984941

      SHA1

      2f9a0724e0295ffd92b8af28ab740ba2c1830101

      SHA256

      b6807f063d021f8ea2c2c473a63d446679cf3d4bec77504463f3f253f6d2641c

      SHA512

      7b68283966515dd5b63e3f0680d58ef039d88188554d37c93e4875822af88cdfc41d51986e355652aef458af386755208b8c1f2ee95d9fbdbb9e7bcb05d6595b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      0d9e2ce52a6dc8b02c384d5a34dd7fe4

      SHA1

      b9a6464f808a757463d9f0176f36fe8576660d50

      SHA256

      b8399af040792e17d37940e3ed077f9bccd44af3207d4c4c46164da43b86c2ec

      SHA512

      b2a61365cd844e84687d7824fa043f3eb4a19d2058fd45fc83e9b2ced476d90fcc319f48fc9f0fe3d72f8bca1b08a37122655007b38888667e0a4c74a22488fc

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      715f2614f470d6f2cdf5595d5e0053b1

      SHA1

      0d4137b32859e26ea87557b7e1944287711ca7ad

      SHA256

      6ec87b9f9194b0b2036d511c68fae327caac86e94ccac240ea41dd319f2fa0ef

      SHA512

      b22cf5ddb97559c5d18f032ad8bf968a24c86e32be45ec1a5a611ab91b8b1fd720cc93ac0d3fc3f564b894a2521ebf16d8d313b72f98dcc63e8934bdf465d445

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      5ecc7b0779cfc6fd41af9a512eb8eb85

      SHA1

      92b8e4d4526c9d4b01866330f4eb72f58087ac8e

      SHA256

      223460d83c190f033e2ad859d5b2077a0c148597e10a23c8839f38d486481e82

      SHA512

      7ca87303e07a9d6579aad4a34671069e14aa248ca55849c495ccc4baf8ce08b8334eaa55e89713229387351a77347d320822bbb58eca200850a0a81065423783

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      61658c87cc82a02010b15cba5c390665

      SHA1

      4bcbf66e34e96453ae676b5b8a202fad05faeee6

      SHA256

      b6e64c8adc438f56f1cb1a13ee1d8bc93e3da37b165836c32f79cf4859478065

      SHA512

      650589e1ef036c88c3ceea8272ca92027c71391daa50ac01ae5cfd715f031b132f6cd3df0af244a0822d75572691888b8ab84e19437579d346be5ca64ef9d5fd

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      d9ef6f0a56273287dfb2e233179d4eda

      SHA1

      7c4bfa5b406f77b2830dcc8524126599dca7b13b

      SHA256

      dfda40b0dab8069122bf5b88ad23bd5beb5733b7ccc1bb61f9777a3d7393983d

      SHA512

      ab86f6992d26a5eca854dadf97e4b2bfcdf2c819801a28f29fa063f9467e580300c29e45b44c17323edfe4cb062da4db196801947c70722a707109736f612384

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation1757707054824535323tmp

      Filesize

      90B

      MD5

      7270714f2f956599e7bccb9d27339b77

      SHA1

      c1a32e5d12276730ce3a818c9c11dfff7eb33b63

      SHA256

      0291453498311a7704702a4b03c524caf471ee561a7fbf947de0d2b9cd2bbe17

      SHA512

      d048d9b25452ddb2c58de85714baff8e04f142e64c29e958e0a02c24d5bc331db7d9522c4f0f037ef2ecc61fa18b4852e07293f09f609825dc8bafd408209b87

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation5006034925857513839tmp

      Filesize

      569B

      MD5

      d038c2cb621d27f6ddc5357bb59aec00

      SHA1

      bd9c7e90736fdef308c904cc4959ae05b58c8394

      SHA256

      efed85c26d279dd464a8813642b761f415498a67ed8fb4768823375d9f72f787

      SHA512

      3a355464a9a240b1a34711b7181466638cc6ee034c9bf6fa6e0d2ee4c3a6f0b6f3048acacc2508e32cc4dbf8e8c67b9b69b20b2ebac553cc0efc1f06e3adb2f4